
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier: 2uIQ+cf2gb6sWTr49U9oOPopuZfl4JeGaUPyj7zE4TM=
Subject key identifier: 5C:9A:5A:A4:73:03:9B:66:E7:8B:90:A1:1B:0D:37:9A:7C:05:77:1A
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number: DC
Signing time: Tue 03 Mar 2026 06:08:55 +0000
Manifest this update: Tue 03 Mar 2026 06:08:54 +0000
Manifest next update: Tue 10 Mar 2026 06:08:54 +0000
Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: /c+frr5snGo/x4gaDeDF9cQBINHcttZpLN+Dpeh1Kdc=)
2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Validity
Not Before: Mar 3 06:08:54 2026 GMT
Not After : Mar 10 06:08:54 2026 GMT
Subject: CN=69a67af7-31fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:7e:ab:3b:7e:19:de:35:8c:43:e1:77:eb:
08:cc:99:60:97:95:27:8a:e4:31:e7:b4:45:56:45:
08:e1:8a:1f:91:24:55:f6:c9:79:0b:53:78:2a:b1:
52:a9:7f:1d:e0:88:e8:27:51:d1:bd:43:ee:4c:14:
18:af:9f:b2:30:d3:0d:57:93:66:6f:9f:64:6b:7a:
7f:31:96:dc:7d:b3:18:1b:6c:ca:73:0d:4e:8f:78:
c6:da:54:09:77:42:f6:e4:65:05:94:24:27:a8:81:
ec:9c:b9:c7:8c:bc:ff:18:99:16:d2:a6:21:be:7f:
a8:5e:41:01:05:43:e5:f6:a0:b2:6d:3f:9b:f8:0b:
fe:54:79:75:b0:cb:5d:be:d2:02:fe:32:30:06:b1:
c2:12:6d:86:3e:c9:5c:c5:70:b5:0c:71:0e:b9:95:
e3:4a:1f:ec:69:36:30:2c:c7:4a:d2:5b:d8:73:92:
9d:6d:5f:7e:81:39:e9:84:7c:2e:d6:3d:00:47:ef:
41:ee:5f:6b:18:03:79:e9:56:42:fe:3d:c0:a9:5b:
bd:60:64:d4:cb:3e:7a:a5:ff:43:03:eb:bf:23:3f:
89:29:31:ab:b2:2f:49:85:df:8f:93:ab:8d:f3:7b:
c4:09:4a:32:01:8f:34:1a:c8:3a:23:e6:34:06:b1:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9A:5A:A4:73:03:9B:66:E7:8B:90:A1:1B:0D:37:9A:7C:05:77:1A
X509v3 Authority Key Identifier:
keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:a8:69:d2:66:d9:68:92:b5:ca:0e:ec:eb:07:47:a0:a3:
c8:5b:9e:d4:96:76:ab:e4:00:22:a8:13:cf:d4:a9:b0:28:01:
ab:d7:dc:74:41:11:6e:11:08:e5:7c:29:07:00:87:6d:56:e3:
f9:2e:d1:0d:ab:b0:b3:48:3f:ae:ca:3c:f2:3f:8a:c7:06:e1:
23:86:e5:2b:8b:dd:21:4c:a0:0b:48:f9:aa:25:52:98:80:64:
92:29:0b:df:08:c8:21:88:c2:b6:15:89:c0:13:4b:13:7d:9b:
97:4c:da:aa:ea:7c:2d:b6:76:be:c7:65:45:6a:7b:db:28:38:
c6:e1:1c:b3:1a:18:eb:cf:e8:04:e7:dd:a7:fb:49:15:4f:49:
87:59:1b:0b:c2:bf:87:3a:7c:63:64:d1:64:30:c8:e1:07:91:
3c:5f:37:b7:01:ec:91:42:98:8c:c3:1c:e8:d9:14:81:63:2a:
a5:69:3c:96:44:be:27:ae:9b:29:d2:f4:a1:fa:59:54:f4:34:
96:e2:b7:4f:dd:4c:6c:05:a3:4d:1f:39:b7:f9:c0:fd:ca:8d:
60:22:62:c9:f1:f5:19:1c:d7:1f:0a:23:0a:00:ed:c0:1a:f1:
06:08:df:76:bc:71:88:a1:44:f1:41:5a:26:a6:1e:88:e3:87:
b1:8b:a9:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1MzYxMTAvBgNVBAUTKDJBRTk4NTgxNUExMERENkQwNDUyM0ZDODFEOERBRkQ3
MjZCRTc4MTYwHhcNMjYwMzAzMDYwODU0WhcNMjYwMzEwMDYwODU0WjAYMRYwFAYD
VQQDEw02OWE2N2FmNy0zMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnt+qzt+Gd41jEPhd+sIzJlgl5UniuQx57RFVkUI4YofkSRV9sl5C1N4KrFS
qX8d4IjoJ1HRvUPuTBQYr5+yMNMNV5Nmb59ka3p/MZbcfbMYG2zKcw1Oj3jG2lQJ
d0L25GUFlCQnqIHsnLnHjLz/GJkW0qYhvn+oXkEBBUPl9qCybT+b+Av+VHl1sMtd
vtIC/jIwBrHCEm2GPslcxXC1DHEOuZXjSh/saTYwLMdK0lvYc5KdbV9+gTnphHwu
1j0AR+9B7l9rGAN56VZC/j3AqVu9YGTUyz56pf9DA+u/Iz+JKTGrsi9Jhd+Pk6uN
83vECUoyAY80Gsg6I+Y0BrH9WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyaWqRz
A5tm54uQoRsNN5p8BXcaMB8GA1UdIwQYMBaAFCrphYFaEN1tBFI/yB2Nr9cmvngW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjUzNi85QTg2REJEMEM5
OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9LdW1GZ1ZvUTNXMEVVal9JSFkydjF5YS1l
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0t1bUZnVm9RM1cwRVVqX0lIWTJ2MXlhLWVCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjUzNi85QTg2REJEMEM5OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9LdW1GZ1ZvUTNX
MEVVal9JSFkydjF5YS1lQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoI6oadJm2WiStcoO7OsHR6CjyFue1JZ2q+QAIqgTz9SpsCgBq9fcdEERbhEI
5XwpBwCHbVbj+S7RDauws0g/rso88j+KxwbhI4blK4vdIUygC0j5qiVSmIBkkikL
3wjIIYjCthWJwBNLE32bl0zaqup8LbZ2vsdlRWp72yg4xuEcsxoY68/oBOfdp/tJ
FU9Jh1kbC8K/hzp8Y2TRZDDI4QeRPF83twHskUKYjMMc6NkUgWMqpWk8lkS+J66b
KdL0ofpZVPQ0luK3T91MbAWjTR85t/nA/cqNYCJiyfH1GRzXHwojCgDtwBrxBgjf
drxxiKFE8UFaJqYeiOOHsYupzQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:16 2026 by rpki-client